2894c5979087388c4d4601f543f4be0a8383e0a3492f63fc104ebf99bcf83bf2

Submit
Reports

Overview

overview

Static

static

Win32.Pega...15.xls

windows10_x64

Win32.Pega...15.xls

windows10_x64

Win32.Pega...?).doc

windows10_x64

Win32.Pega...15.doc

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...ain.js

windows10_x64

Win32.Pega...ble.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...x.html

windows10_x64

Win32.Pega...vg.xml

windows10_x64

Win32.Pega...min.js

windows10_x64

Win32.Pega...hp.vbs

windows10_x64

Win32.Pega...hp.vbs

windows10_x64

Win32.Pega...hp.vbs

windows10_x64

Win32.Pega...php.js

windows10_x64

Win32.Pega...ol.exe

windows10_x64

Win32.Pega...gs.bat

windows10_x64

Win32.Pega...ct.bat

windows10_x64

Win32.Pega...es.bat

windows10_x64

Win32.Pega...re.bat

windows10_x64

Win32.Pega...er.bat

windows10_x64

Win32.Pega...er.bat

windows10_x64

Win32.Pega...hp.ps1

windows10_x64

Win32.Pega...RS.BAT

windows10_x64

Win32.Pega...ck.exe

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Win32.Pega...pp.vbs

windows10_x64

Analysis

max time kernel
300s
max time network
371s
platform
windows10_x64
resource
win10v20210408
submitted
23-07-2021 09:33

Sharing

Copy URL

Twitter E-mail

Static task

static1

macro xlm

Behavioral task

behavioral1

Sample

Win32.Pegasus/cvs_banks/????????? (500) 30 06 2015.xls

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

Win32.Pegasus/cvs_banks/????????? (485) 24 08 2015.xls

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral3

Sample

Win32.Pegasus/cvs_banks/?????? ?? ?????? ?. ???????? ?? 13.02.2013 (?? ??????? ????????).doc

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral4

Sample

Win32.Pegasus/cvs_banks/?? ?????? ?? 17.11.2015.doc

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral5

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/pnotify.custom.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral6

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/messi.min.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral7

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/main.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral8

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery.jeditable.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral9

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery.form.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral10

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery-ui.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral11

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/jquery-1.11.2.min.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral12

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/index.html

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral13

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/glyphicons-halflings-regular.svg.xml

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral14

Sample

Win32.Pegasus/Pegasus/web-adminpart/res/bootstrap.min.js

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral15

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/mod_auth.php.vbs

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral16

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/mod_ajax_mjobs.php.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral17

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/mod_ajax_mcreds.php.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral18

Sample

Win32.Pegasus/Pegasus/web-adminpart/inc/ip2location.class.php.js

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral19

Sample

Win32.Pegasus/Pegasus/tools/signtool.exe

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral20

Sample

Win32.Pegasus/Pegasus/tools/recrypt_strings.bat

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral21

Sample

Win32.Pegasus/Pegasus/tools/rebuild_project.bat

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral22

Sample

Win32.Pegasus/Pegasus/tools/rebuild_modules.bat

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral23

Sample

Win32.Pegasus/Pegasus/tools/rebuild_core.bat

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral24

Sample

Win32.Pegasus/Pegasus/tools/prebuild_installer.bat

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral25

Sample

Win32.Pegasus/Pegasus/tools/postbuild_installer.bat

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral26

Sample

Win32.Pegasus/Pegasus/tools/make_binpack.php.ps1

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral27

Sample

Win32.Pegasus/Pegasus/tools/MAKE_INSTALLERS.BAT

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral28

Sample

Win32.Pegasus/Pegasus/tools/LZ4_pack.exe

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral29

Sample

Win32.Pegasus/Pegasus/shared/CommStructures.cpp.vbs

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral30

Sample

Win32.Pegasus/Pegasus/mod_NetworkConnectivity/transport_Generic.cpp.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral31

Sample

Win32.Pegasus/Pegasus/mod_KBRI/kbriTargetAccManager.cpp.vbs

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

Behavioral task

behavioral32

Sample

Win32.Pegasus/Pegasus/mod_KBRI/kbriList.cpp.vbs

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

Report Analysis Logs

General

Target

Win32.Pegasus/Pegasus/web-adminpart/inc/mod_auth.php.vbs
Size

1KB
MD5

e866c1f864a1a2d3489bc959960fbe2a
SHA1

0bdf4407301a16cada934f7fdbf44bcbfa3aef25
SHA256

d55af829fff3735dc9311c08c8850848c9ce152f50848604557bda8aea7373af
SHA512

c820946de9a61077c5853581e0ee8d8d118bece377cdcc73e4f812765476eedc0fe7e05dac0da7a519e8523e8d8c8ceec22c1151194614262ef24f5ef7cf2e36

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Win32.Pegasus\Pegasus\web-adminpart\inc\mod_auth.php.vbs"
1⤵
PID:488

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads